Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-121389

FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdr_dump_packet that allows malicious RDP servers to abort clients by sending malformed RDPDR device-list announcements. Attackers can declare a DeviceDataLength exceeding the received packet, triggering a fatal Stream_Seek assertion when device redirection, TRACE logging, and WinPR assertions are enabled.
Exploit prediction scoring system (EPSS) score
CVSS Severity
CVSS v3 Score 3.1
Products affected by CVE-2026-121389
  • Freerdp » Freerdp » Version: 3.27.0
    cpe:2.3:a:freerdp:freerdp:3.27.0
  • Freerdp » Freerdp » Version: 3.27.1
    cpe:2.3:a:freerdp:freerdp:3.27.1
  • Freerdp » Freerdp » Version: 3.28.0
    cpe:2.3:a:freerdp:freerdp:3.28.0
  • Freerdp » Freerdp » Version: 3.29.0
    cpe:2.3:a:freerdp:freerdp:3.29.0
  • Freerdp » Freerdp » Version: 3.30.0
    cpe:2.3:a:freerdp:freerdp:3.30.0
  • Freerdp » Freerdp » Version: 3.31.0
    cpe:2.3:a:freerdp:freerdp:3.31.0
  • Freerdp » Freerdp » Version: 3.31.1
    cpe:2.3:a:freerdp:freerdp:3.31.1
  • Freerdp » Freerdp » Version: 3.32.1
    cpe:2.3:a:freerdp:freerdp:3.32.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved